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Abstract. Let F C K be number fields, and let Of and Ok be their 
rings of integers. If there exists an elliptic curve E over F such that 
rk E(F) = rk E(K) — 1, then there exists a diophantine definition of Of 
over Ok- 



1 Introduction 

D. Hilbcrt asked, as Problem 10 of his famous list of 23 problems posed to the 
mathematical community in 1900, for an algorithm to decide, given a polynomial 
equation f(xi, . . . ,x n ) = with coefficients in the ring Z of integers, whether 
there exists a solution with x\, . . . , x n G Z. In Hilbert's time, there was no formal 
definition of algorithm, but presumably what he had in mind was a mechanical 
procedure that a human could in principle carry out, given sufficient paper, 
pencils, erasers, and time, following a set of strict rules requiring no insight 
or ingenuity on the part of the human. In the 1930s, several rigorous models of 
computation were proposed as a substitute for the informal notion of "mechanical 
procedure" as above (the A-defmable functions of A. Church and S. Kleene, the 
recursive functions of K. Godel and J. Herbrand, and the logical computing 
machines of A. Turing). These models, as well as others developed later, were 
shown to be equivalent; this gave credence to the Church- Turing thesis, which 
is the belief that every mechanical procedure can be carried out by a Turing 
machine. Therefore, the modern interpretation of Hilbert's Tenth Problem is 
that it asks whether a Turing machine can decide the existence of solutions. 
J. Matijasevic [ N4~at70[ , building on earlier work by M. Davis, H. Putnam, and 



J. Robinson |DPR61] showed that there is no such Turing machine. To describe 
their work in more detail, we need a few definitions. A subset S of Z™ is called 
listable or recursively enumerable if there is an algorithm (Turing machine) such 
that S is exactly the set of a £ Z n that are eventually printed by the algorithm. 
A subset S of Z" is said to be diophantine, or to admit a diophantine definition, 
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if there is a polynomial p(ax, . . . , a n , x\, . . . , x m ) £ Z[ai, . . . , a„, xi, . . . , x m ] such 
that 

5 = { a G Z" : (3xi, • ■ • ,x m G Z) p(ax, ...,a n ,Xx,.. .,x m ) = 0}. 

For example, the subset Z> := {0, 1, 2, . . . } of Z is diophantine, since for a G Z, 
we have 

a e Z> <^=> (3xi, X2, x 3 , Xi G Z) x x + x 2 + x 3 + x 4 = a. 

One can show using "diagonal arguments" that there exists a listable subset 
L of Z whose complement is not listable. It follows that for this L, there is no 
algorithm that takes as input an integer a and decides in a finite amount of time 
whether a belongs to L\ in other words, membership in L is undecidable. 

Diophantine subsets of Z™ are listable: given p, one can write a computer 
program with an outer loop with B running through 1,2,..., and an inner loop 
in which one tests the finitely many (ai, . . . , a n , Xi, . . . , x m ) G Z™ +m satisfying 
|ai|, \xj\ < B for all i and j, and prints (ax,. .., a n ) if p(ax, ■ ■ ■ ,a n ,xx, ■ ■ ■ , x m ) — 



0. Davis | Dav53 conjectured conversely that all listable subsets of Z" were dio- 
phantine, and this is what Matijasevic eventually proved. In particular, the set 
L is diophantine. Hence a positive answer to Hilbert's Tenth Problem would 
imply that membership in L is decidable. But membership in L is undecid- 
able, so Hilbert's Tenth Problem is undecidable too; that is, there is no algo- 
rithm that takes as input a polynomial p G Z[xi, . . . , x n ], and decides whether 
p(xi, . . . , x n ) = has a solution in integers. 

More generally, if R is any commutative ring with 1, one can define what it 
means for a subset of R n to be diophantine over R, by replacing Z by R every- 
where. Similarly one can speak of Hilbert's Tenth Problem over R provided that 
one has fixed some encoding of elements of R as finite strings of symbols from a 
finite alphabet, so that polynomials over R can be the input to a Turing machine. 
For some rings R (for example, uncountable rings) such an encoding may not be 
possible. In this case one should modify the problem, by specifying a countable 
subset V of the set of all polynomials over R and an encoding of elements of V as 
finite strings of symbols, and then asking whether there exists a Turing machine 
that takes as input a polynomial p G V and decides whether p(xx, ■ ■ ■ , x n ) = 



has a solution over R. For example, K. Kim and F. Roush | KR92|| proved that 



Hilbert's Tenth Problem over the purely transcendental function field C^i^) 
is undecidable when one takes V to be the set of polynomials with coefficients in 
Z[tx,t 2 }- Usually it is not necessary to specify exactly how the elements of V are 
encoded, since usually given any two reasonable encodings, a Turing machine 
can convert between the two. 

Perhaps the most important unsolved question in this area is Hilbert's Tenth 
Problem over the field Q of rational numbers. The majority view seems to be that 
it should be undecidable. To prove this, it would suffice to show that the subset 
Z of Q is diophantine over Q. On the other hand, B. Mazur has suggested that 
perhaps for any variety X over Q, the topological closure of -X"(Q) in X(R) has 
at most finitely many connected components; if this is true, no such diophantine 



definition of Z over Q exists. See 
and [PhcOO for further discussion. 



Maz94] and the more recent articles [GZOO 



The function field analogue, namely Hilbert's Tenth Problem over the func- 
tion field k of a curve over a finite field, is known to be undecidable. The first 
result of this type is due to T. Pheidas [Phe91 , who proved this for k = F q (t) 



with q odd. His argument was adapted and generalized by C. Videla [ Vid94| for 
k = F q (t) with q even, by A. Shlapentokh [ ph!92 ] for other function fields of 
odd characteristic, and finally by K. Eisentrager [ Eis for the remaining function 
fields of characteristic 2. Analogues are kno wn also for m any function fields over 

infinite fields of positive characteristic: see [ShlOOa] and [ Eis | . 

For more results concerning Hil bert's T enth Problem , see the book | DLPVG00 |, 
and especially the survey articles [ PZOO and ShlOOb | therein. Since the publi- 
cation of that book, undecidability of Hilbert's Tenth Problem has been proved 
also for fu nctio n fields of curves X over formally real fields ko with X(ko) 
nonempty [ MB ] (in fact this is just one application of his results) , and for function 
fields of surfaces over real closed or algebraically closed fields of characteristic 
zero [Eis]. 



2 Hilbert's Tenth Problem over rings of integers 

In this article, our goal is to prove a result towards Hilbert's Tenth Problem over 
rings of integers. If F is a number field, let Op denote the integral closure of 
Z in F. There is a known diophantine definition of Z over Op for the following 
number fields: 



1. F is totally real [Den8C] 



2. F is a quadratic extension of a totally real number field | DL78 1 

3. F has exactly one conjugate pair of nonreal embeddings 



Phe8§ ], gg8§ . 



In particular, Hilbert's Tenth Problem over Of is undecidable for such fields F. 
It is conjectured DL7§| | that for every number field F, there is a diophantine 



definition of Z over Of- Our main theorem gives evidence for this conjecture, 
by reducing it to a plausible conjecture about the existence of certain elliptic 
curves. 

Before stating our theorem, let us recall the Mordell-Weil Theorem, which 
states that if E is an elliptic curve over a number field F, then the abelian group 
E(F) is finitely generated. Let rk E(F) denote the rank of E(F). 

Theorem 1. Let F C K be number fields, and let Of and Ok be their rings of 
integers. Suppose that there exists an elliptic curve E over F such that rkE(F) = 
rkE(K) — 1. Then there exists a diophantine definition of Of over Ok- 

Most of the rest of this paper is devoted to the proof of Theorem |l| But for 
now, we mention its application to Hilbert's Tenth Problem. 

Corollary 2. Under the hypotheses of Theorem [J, if in addition F is of one of 
the types of number fields listed above for which a diophantine definition of Z 
over Of is known, then Hilbert's Tenth Problem over Ok is undecidable. 



Proof. Theorem [T] reduces the undecidability over Ok to the undecidability over 
O f . □ 



J. Dcnef, at the end of | Dcn80 |, sketches a simple proof of Theorem [j] in 
the case where K is totally real and F = Q. In fact, he is also able to treat 
some totally real algebraic extensions K of infinite degree over Q. But his proof 
technique does not seem to generalize easily to fields that are not totally real. 

Our proof of Theorem [l] is similar to that of an older result, the theorem 
of [DL78|, which uses a 1-dimensional torus (a Pell equation) in place of the 
elliptic curve. We have been inspired also by the exposition of the "weak version 
of the vertical method" in |Shl00b| and by the ideas in PheOC]. 



2.1 Preliminaries on diophantine sets over Ok 



The subset Ok — {0} of Ok is diophantine over Ok'- see Proposition 1(c) 
of [ DL78^ . We have a surjective map Ok X {Ok - {0}) — > K taking (a,b) 
to a/b. If S C K n is diophantine over K, then the inverse image of S under 
(Ok x (Ok — {0}))™ — > K n is diophantine over Ok- In this case, we will also 
say that S is diophantine over Ok- It follows that in constructing diophantine 
definitions over Ok, there is no harm in using equations with some variables 
taking values in Ok and other variables taking values in K. 

Given t G K x , define the denominator ideal den(t) = { & G Ok ■ bt G Ok } 
and the numerator ideal num(t) = den(t _1 ). Also define num(0) to be the zero 
ideal. These ideals behave in the obvious way upon extension of the field. 



Lemma 3. 



1. For fixed m,n G Z>o, the set of (xi, . . . , x m , y±, . . . , y n ) in K m+n such that 
the fractional ideal (xi, . . . , x m ) divides the fractional ideal (yi, . . . , y n ) is 
diophantine over Ok- 

2. The set of (t,u) G K x x K x such that den(t) | den(w) is diophantine over 
Ok- 

3. The set of (t,u) G K x x K such that den(i) | num(u) is diophantine over 
Ok- 

4- The set of (t,u) G Ok x K x such that t \ den(w) is diophantine over Ok- 

Proof. Statement 1 is clear, since the condition is that there exist G Ok 
such that yj = J^. CijXi for each j. Statement 2 follows from statement 1, since 
den(f) | den(u) if and only if the fractional ideal (u, 1) divides (t, 1). Statements 
3 and 4 follow from statement 2: namely, 

den(t) | num(u) u = or (3v)(uv — 1 and den(t) | den(v)), 

t | den(u) <^=> (3v)(tv = 1 and den(w) | den(u)). 



□ 



2.2 Bounds from divisibility in Ok 

Let n = [K : Q] and s = [K : F]. Fix a G Ok such that {1, a, . . . , a s_1 } is a 
basis for if over F. Let D G Of denote the discriminant of this basis. If I is an 
ideal in Ok, let Nk/q(I) G Z>o denote its norm. 

Lemma 4. There is a positive integer c > depending only on F, K , and a 
such that the following holds. Let I C Ox be a nonzero nonunit ideal, and let 
\i G Ok- Write fj, — Y]^—q o-iO 1 with <n G F. Suppose that 1) • • • (fi + n) I. 

ThenNK /Q (Dai)<NK /Q (I) c . 



Proof. This is essentially Section 1.2 of |Shl00b|. The only differences are that 
we have specialized by taking U = —i, and we have generalized by replacing the 
element y by an ideal 1: this does not affect the proof. □ 



The following is similar to Lemma 2.5 in Shl00b| 



Lemma 5. There exists a constant c' > depending only on F and K such 
that the following holds: Let L be a nonzero ideal of Of- Suppose fi G Ok and 
w G Of- Write /i = X^!=o a * a * with di G F. Suppose NK/Q(Da>i) < c 'Nk/q(I) 
for all i, and fi = w (mod LOk)- Then fi G Op- 
Proof. Choose ideals J\,...,Jh Q Of representing the elements of the class 
group of F, and choose d > such that c'N K /ci(Jj) < 1 for all j. Choose j such 
that Jjl^ 1 is principal, generated by z G F x , say. Since /i = w (mod IOk), we 
have 



z{p, — w) = z(oq — w) + (za\)a + ■ ■ ■ + (za s ^i)a s G O 



K ■ 



By Lemma 4.1 of [ShlOObj (an elementary lemma about discriminants), Dzcn G 



Of for i = 1, 2, . . . , s — 1. On the other hand, 

N K / (Ji) 

\NK /Q (Dz ai )\ = \N K/Q (D ai )N K/Q (z)\ < c'N K/Q (I) * /Q \l' < 1, 

Nk/qV ) 

by definition of c', so Dzai = 0. Thus a, = for i = 1, 2, . . . , s — 1. Hence 
jti G Of. □ 

2.3 Denominators of ^-coordinates of points on an elliptic curve 

We assume that an elliptic curve E as in Theorem [l] exists. Thus E is defined 
over F, and rk F(F) = rkF(FT) = 1. Hence E has a Weierstrass model of the 
form y 2 — x 3 + ax + b and we may assume a, b G Of- Let O denote the point at 
infinity on E, which is the identity of E{F). 

For each nonarchimedean place p of K, let K p denote the completion of K 
at p. and let F p denote the residue field. Reducing coefficients modulo p yields 
a possibly singular curve 

F P [X,Y,Z] 



F p := Proj 



(Y 2 Z -X 3 - aXZ 2 - bZ 3 ) 



over F p . Let Ep mooth denote the smooth part of E p . Let E (K p ) be the set of 
points in E(K p ) whose reduction mod p lies in Fp mooth (F p ). 



Lemma 6. 



1. Eo(Kp) is a subgroup of E{K p ). 

2. -Ep mooth (Fp) is an abelian group under the usual chord-tangent law. 

3. Reduction modulo p gives a surjective group homomorphism red p : Eq (K p ) 

^smooth ^jp ^ 

4- Both Eo(Kp) and Ei(K p ) :— ker(redp) are of finite index in E(K P ). 



Proof. For the first three statements, see Proposition VII. 2.1 in [ |5il92 |. We have 



not assumed that our Weierstrass model is minimal at p, so our definition of Eq is 
different from the standard one in [ 5il92| , but this does not matter in the proofs. 



To prove statement 4, observe that E (K p ) and Ei{K p ) are open subgroups of 
the compact group E(K p ) in the p-adic topology. □ 

From now on, r e Z>i is assumed to be a multiple of ^=E(K)t ors , of the index 
(E(K) : E(F)), and of the index (E(K p ) : E (K p )) for each bad nonarchimedean 
place p. Then rE(K) is a subgroup of E(F) that is free of rank 1, and rE(K) is 
contained in E (K p ) for every p. 

We will need a diophantine approximation result. First we define the norm 
\\ v : K — > R> for each place v of K; it will be characterized by its values on 
a e Ok- If v is nonarchimedean and a 6 Ok — {0}, then ||a||„ := q~ v ^ where q 
is the size of the residue field, and the discrete valuation v is normalized to take 
values in Z. If v is real, then ||a||„ is the standard absolute value of the image 
of a under K — > R. If v is complex, then ||a||„ is the square of the standard 
absolute value of the image of a under K — ► C. Define the naive logarithmic 
height of a € K by 

h(a) :— logmax{||a||^, 1}. 

places v of K 

If one sums over only the nonarchimedean places v, one obtains logiV^-/q den(a). 

Proposition 7. Let X be a smooth, projective, geometrically integral curve over 
K of genus > 1. Fix a place v of K . Let <p be a nonconstant rational function 
on X . Let Pi, P2, ■ . ■ be a sequence of distinct points in X{K). For sufficiently 
large m, P m is not a pole of <f>, so z m := (f>(P m ) belongs to K. Then 

Hm to ;»*"ii« = 0. 

m->oo h{z m ) 

Proof. Sec Section 7.4 of per97| . □ 



Lemma 8. The following holds if r is sufficiently large: If P G rE{K) — {0} 
and m £ Z — { — 1, 0, 1}, then 

\ogN K/Q den(x(mP)) > JL TO 2 logA^/Q den(x(P)) > 0; 

in particular den(x(mP)) ^ den(cc(P)) and den(x(P)) ^ (1). 



Proof. Let Pi be a generator of rE(K). The theory of the canonical height 



in Chapter 8, Section 9 of Sil92l implies that there is a real number h{P\) > 



(namely, the canonical height of Pi, suitably normalized) such that h(x(mP\)) = 
m 2 h(Pi) + 0(1), where the implied constant is independent of to e Z. Proposi- 
tion |?j applied to each archimedean v, with X = E and cj> = x, shows that if we 
forget to include the (finitely many) archimedean places in the sum defining h, 
we obtain 

log^/q den(a;(mP 1 )) = (1 - o{l))h(x{mPx)) = (1 - o(l))m 2 / l (P 1 ) 

as |to| — > oo. The results follow for large r. □ 

Of course, there is nothing special about 9/10; any real number in the interval 
(1/4, 1) would have done just as well. 

2.4 Divisibility of denominators 

From now on, we suppose that r is large enough that Lemma ^ holds. 

Lemma 9. Let P,P' e rE(K) - {O}. Then den(x(P)) | den(z(P')) if and only 
if P' is an integral multiple of P. 

Proof. We first show that for any ideal / C Ok, the set 

Gi := { Q e rE(K) : I | den(a;(Q)) } 

is a subgroup of rE(K). (By convention, we consider O to be an element of G/.) 
Since an intersection of subgroups is a subgroup, it suffices to prove this when 
/ = p" for some prime p and some n 6 Z>i. Let O p be the completion of Ok 
at p. Let T G Ok [[zi, z 2 }] denote the formal group of E with respect to the 



parameter z := —x/y, as in Chapter 4 of [ 31192 1 . Then there is an isomorphism 
JF(pOp) ~ Ei(Kp), given by z ^ (x(z) 7 y(z)) where x(z) — z~ 2 + ... and 
y(z) = —z~ 3 + . . . are Laurent series with coefficients in Ok- It follows that G p ™ 
is the set of points in rE(K) lying in the image of ^(pW^Op). In particular 
G p >i is a subgroup of rE(K). 

The "if" part of the lemma follows from the preceding paragraph. Now 
we prove the "only if" part. Let G — Gdcn(i(P})- Then G is a subgroup of 
rE(K) ~ Z, so G is free of rank 1. Let Q be a generator of G. By definition of 
G, we have P £ G, so P is a multiple of Q. By the "if" part already proved, 
den(x(<3)) | den(a;(P)). On the other hand, Q e G, so den(ir(P)) | den(x(Q)) 
by definition of G. Thus den(a;(Q)) = den(x(P)). By Lemma § Q = ±P. If 
den(z(P)) | den(x(P')), then P' e G = ZQ = ZP. □ 



Lemma 10. /// C Ok is a nonzero ideal, then there exists P G rE{K) — {0} 
such that I | den(x(P)). 



Proof. We use the notation of the previous proof. It suffices to show that G p ™ is 
nontrivial. This holds since the image of T(p^ n / 2 ^O p ) under T{pO p ) ~ E X {K 9 ) 
is an open subgroup of E(K p ), hence of finite index. □ 



Lemma 11. Suppose P £ rE(K) — {0} and m € Z — {0}. Let t = x(P) and 
t' = x(mP). Then den(i) | wxm((t/t' - m 2 ) 2 ). 

Proof. Suppose that p is a prime dividing den(i). Let v p : K p — > Z U {oo} 
denote the discrete valuation associated to p. Then n := v p (z{P)) is positive. 
Since x = z~ 2 + . . . is a Laurent series with coefficients in Ok, we have x(P) £ 
z(P)~ 2 (l+p n O p ). Using the formal group, we see that z(mP) e mz(P)+p 2n O p ; 
in particular v p (z(mP)) > n, so x{mP) S z(mP)~ 2 (l +p n O p ). Thus 



t x(P) (z{mP)^ 2 



t' x(mP) V z ( p ) 



(1 + p n O p 



But e m + p n O p , so t/t' 6 m 2 + p n O p , so p" | num(t/t' - m 2 ). On the 

other hand, p 2n is the exact power of p dividing den(i). Applying this argument 
to every p proves den(t) | num((t/t' — m 2 ) 2 ). □ 



2.5 Diophantine definition of Of over Ok 

Lemma 12. With hypotheses as in Theorem there exists a subset S C Ok 
such that S is diophantine over Ok om,d {m 2 : m G Z>i } C S C Of. 

Proof. Let c and c' be the constants of Lemmas || and [|, respectively. By 
Lemma ||, if I £ Z>i is sufficiently large, then 

c'iVqden^tPo)) 1 / 2 > N K/Q den(x(P Q ) c ) 

for all P £ r£;(i^) - {O}. Fix such an £. 

Let 5 be the set of fx E O k such that there exist P , P', P' £ rE(K) - {0} 
and to,t,t' £ F such that 

1. P = £P 

2. t = x(P ), t = x(P), t' = x(P') 

3. (/i + l)(/i +2)...( A t + n) | den(t ) 

4. den(i) | den(t') 

5. den(i) | mxm((t/t' - /x) 2 ) 

It follows from Lemma ^ that S is diophantine over Ok- 

Suppose m € Z>i. We wish to show that [i := m 2 belongs to S. By Lemma |Io|, 
there exists P £ rE(K) - {0} such that (/i + l)(/x + 2) ...(fx + n) | den(a;(Po))- 
Let P = £P and P' = mP. Let t Q = x(P ), t = x(P), and t' = x(P'). Then 
conditions (1), (2), and (3) in the definition of S are satisfied, and (4) and (5) 
follow from Lemmas p] and 111], respectively. Hence m 2 £ S. 



Now suppose that /i £ S. We wish to show that fi £ Of- Fix /n, P, P', ^o, i ; 
t' satisfying (1) through (5). By (4) and Lemma |^, P' = mP for some nonzero 
to € Z. By Lemma [H|, den(t) | num((t/t' — m 2 ) 2 ). On the other hand, (5) says 
that den(i) | num((i/i' — m) 2 )- Therefore den(i) 1 / 2 | num(^ — to 2 ) = (/i — to 2 ). 
(Note that each prime of Of or of Ok that appears in den(i) must occur to 
an even power, since t is the cc-coordinate of a point on y 2 = x 3 + ax + b. 
Hence den(i) 1 / 2 is a well-defined ideal.) Write /i = X^i=o a i Q;l with a, S P. 
By (3) and Lemma | N K /Q(Da,i) < N K /Q(den(to)) c . By definition of £, we have 
N K /Q(den(to)) c < c'iV^/qden(i) 1 / 2 . Combining these shows that the hypotheses 
of Lemma || hold for w — m 2 and / = den(t) 1 / 2 (as an ideal in Of)- Thus 
jti € Op- □ 



Proof of Theorem 0. Let 5 be the set given by Lemma 12. Then Si := { s — 



s,s'eS) contains all odd integers at least 3, because of the identity (to + l) 2 — 
m 2 = 2to + 1. Next, 52 := Si U { 4 — s : s € Si } contains all odd integers, and 

53 := S2 U { s + 1 : s S S*2 } contains Z. Let /3i, . ..,/?& be a Z-basis for Oj?. Then 

54 := { aifii + • • • + abPb : ai, . . . , S S3 } contains O^. 

But S C Of, so Si C Of for i = 1, 2, 3, 4. In particular, S 4 = Of- Also, S is 
diophantine over Ok, so each Sj is diophantine over Ok- In particular, Op — S4 
is diophantine over O^-. □ 



2.6 Questions 

1. Is it true that for every number field K, there exists an elliptic curve E over 
Q such that rk£?(Q) = rkE(K) — 11 The author would conjecture so. If 
so, then Hilbert's Tenth Problem over Ok is undecidable for every number 
field K. 

2. Can one weaken the hypotheses of Theorem |l| and give a diophantine defi- 
nition of Of over Ok using any elliptic curve E over K with rk E(K) = 1, 
not necessarily defined over Ft Such elliptic curves may be easier to find. 
But our proof of Theorem |l| seems to require the fact that E is defined over 
F and has rkE(F) — 1, since Lemma || fails if the ideal / of Of is instead 
assumed to be an ideal of Ok- 

3. Can one prove an analogue of Theorem [I] in which the elliptic curve is re- 
placed by an abelian variety? 
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